This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json) Hash identifier: r108uRQkZpx9sXw68wky66bYPesD52133JLk/w5lEz8= Subject key identifier: C1:71:E5:77:71:E1:44:83:B5:C0:BC:CB:46:51:C5:29:88:AD:02:D9 Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90 Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390 Certificate serial: 019AF4659DB0783BAA9957DBC89F2A08D564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft Manifest number: 0F4C Signing time: Sat 06 Dec 2025 16:01:31 +0000 Manifest this update: Sat 06 Dec 2025 16:01:31 +0000 Manifest next update: Sun 07 Dec 2025 16:01:31 +0000 Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: k2MYj3hpqOV2yID/yHWRMD45gw/Lz+A79BzAWrfuCvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9d:b0:78:3b:aa:99:57:db:c8:9f:2a:08:d5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390 Validity Not Before: Dec 6 16:01:31 2025 GMT Not After : Dec 7 16:01:31 2025 GMT Subject: CN=c171e57771e14483b5c0bccb4651c52988ad02d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:b9:82:a5:a7:79:8a:c1:f1:ae:b9:49:09: a9:61:5b:14:5e:70:0c:67:ca:10:80:79:04:b6:ce: c8:e9:7e:d2:88:c6:ec:15:c7:68:2d:a6:c0:7c:39: 13:70:a3:98:7d:29:e6:79:f0:26:6a:c2:d2:1b:b3: 5b:3b:c9:30:bd:70:80:b6:63:05:b3:6f:97:14:1c: 05:94:f0:3e:9e:71:92:a0:88:08:69:e2:e1:1d:f3: d0:7f:b1:aa:e0:3f:1e:e8:e1:78:49:ce:6b:86:d1: eb:87:c7:80:9c:7a:58:f8:ce:34:62:74:52:df:7b: d3:92:99:b4:6e:de:31:ac:52:07:7e:b7:c6:ce:fa: e9:b7:ba:bd:a9:c1:71:3b:43:a4:e1:ff:32:ed:35: 50:c6:1e:f2:b2:c3:e3:6e:fd:36:20:8e:9e:b6:1e: 49:4a:57:f1:23:31:3b:cf:ba:a4:b8:9b:09:29:74: a0:c9:69:83:91:ad:97:49:48:3e:f7:a4:a3:24:4b: fc:89:52:32:bc:bb:10:40:a1:ee:ed:57:50:32:37: 32:92:62:1b:f1:4b:3c:a2:6d:46:c4:0a:45:48:13: f6:9a:d6:cb:9e:08:e3:95:7c:ec:5b:c6:33:7f:5c: 07:44:04:61:b4:76:38:53:7b:34:57:f3:d4:95:e3: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:E5:77:71:E1:44:83:B5:C0:BC:CB:46:51:C5:29:88:AD:02:D9 X509v3 Authority Key Identifier: keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:01:0b:ab:c8:1b:99:a6:ac:d7:58:f9:34:33:a1:85:45:63: 9c:d0:7a:9a:4c:57:de:1e:78:b3:27:ee:50:4a:a2:30:e1:bb: 05:a2:44:ad:cb:4f:09:4d:43:fa:8d:4e:d7:33:b8:3a:e2:49: 72:3a:b7:29:3f:6a:14:0a:98:19:c1:c1:1d:a1:1f:b2:eb:d1: 37:5c:e4:89:ea:06:00:4c:e3:71:00:6b:b8:41:9d:81:1c:85: 38:a0:49:fb:19:98:6f:80:31:ef:50:ec:58:91:16:84:a8:71: da:5a:90:3b:f0:f6:0c:1e:37:b1:1d:25:32:17:06:55:20:32: c1:42:06:89:db:62:18:99:f2:9c:ec:36:82:84:57:67:a1:34: ef:3b:11:8a:06:ad:6b:63:79:7f:52:7c:e8:ca:0d:aa:c0:79: 9b:ec:0a:37:21:c2:b0:9b:eb:13:b1:8e:30:15:96:13:a3:97: 59:fc:7c:0f:41:50:19:d9:fb:b7:2a:ff:72:bb:fe:06:75:e7: a2:81:05:30:85:c7:f8:42:c6:f4:05:98:9f:5c:21:1f:d7:2f: 53:7f:7e:05:b6:44:61:c5:38:a9:91:f9:32:21:f5:e4:60:c5: a1:ca:0f:d6:6b:40:bc:8d:75:28:eb:75:1f:91:1e:7b:55:ff: ae:e1:55:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZ2weDuqmVfbyJ8qCNVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYTBmZWMxOGVmMjlmOWFhZGZlOTYyYmNmNzQwODkwZGIw ZjczOTAwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjA3MTYwMTMxWjAzMTEwLwYDVQQD EyhjMTcxZTU3NzcxZTE0NDgzYjVjMGJjY2I0NjUxYzUyOTg4YWQwMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YC5gqWneYrB8a65SQmpYVsUXnAM Z8oQgHkEts7I6X7SiMbsFcdoLabAfDkTcKOYfSnmefAmasLSG7NbO8kwvXCAtmMF s2+XFBwFlPA+nnGSoIgIaeLhHfPQf7Gq4D8e6OF4Sc5rhtHrh8eAnHpY+M40YnRS 33vTkpm0bt4xrFIHfrfGzvrpt7q9qcFxO0Ok4f8y7TVQxh7yssPjbv02II6eth5J SlfxIzE7z7qkuJsJKXSgyWmDka2XSUg+96SjJEv8iVIyvLsQQKHu7VdQMjcykmIb 8Us8om1GxApFSBP2mtbLngjjlXzsW8Yzf1wHRARhtHY4U3s0V/PUleOTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFx5Xdx4USDtcC8y0ZRxSmIrQLZMB8GA1UdIwQY MBaAFIyg/sGO8p+arf6WK890CJDbD3OQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktELXdZN3luNXF0X3BZcnozUUlrTnNQYzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lYTViNDAtMjg4Ni00YmFmLThlYTAt MTEzZWVmYTUxYWE2LzEvaktELXdZN3luNXF0X3BZcnozUUlrTnNQYzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lYTViNDAtMjg4Ni00YmFmLThlYTAtMTEzZWVmYTUxYWE2 LzEvaktELXdZN3luNXF0X3BZcnozUUlrTnNQYzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQELq8gb maas11j5NDOhhUVjnNB6mkxX3h54syfuUEqiMOG7BaJErctPCU1D+o1O1zO4OuJJ cjq3KT9qFAqYGcHBHaEfsuvRN1zkieoGAEzjcQBruEGdgRyFOKBJ+xmYb4Ax71Ds WJEWhKhx2lqQO/D2DB43sR0lMhcGVSAywUIGidtiGJnynOw2goRXZ6E07zsRigat a2N5f1J86MoNqsB5m+wKNyHCsJvrE7GOMBWWE6OXWfx8D0FQGdn7tyr/crv+BnXn ooEFMIXH+ELG9AWYn1whH9cvU39+BbZEYcU4qZH5MiH15GDFocoP1mtAvI11KOt1 H5Eee1X/ruFV7g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:13 2025 by rpki-client